{"id":"CVE-2019-6725","aliases":["EUVD-2019-16283","GHSA-qx8v-q2j7-79rf"],"status":"published","title":"The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 (2.00...","description":"The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 (2.00(AAKK.3)) devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01785,"percentile":0.78458,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-798"],"published":"2019-05-31T21:27:36Z","modified":"2026-06-17T02:39:33Z","products":[{"vendor":"zyxel","product":"p-660hn-t1_firmware"}],"references":[{"url":"https://seclists.org/bugtraq/2019/May/78","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6725"},{"url":"https://github.com/advisories/GHSA-qx8v-q2j7-79rf"}],"sources":{"cve":[{"id":"CVE-2019-6725","description":"The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 (2.00(AAKK.3)) devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin.","status":"published","published":"2019-05-31T21:27:36Z","modified":"2024-08-04T20:31:04.318Z","updated_at":"2026-11-02T14:20:23.048861Z"}],"euvd":[{"id":"EUVD-2019-16283","description":"The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 (2.00(AAKK.3)) devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin.","status":"published","published":"2019-05-31T21:27:36Z","modified":"2024-08-04T20:31:04Z","updated_at":"2026-11-03T03:06:48.069977Z"}],"ghsa":[{"id":"GHSA-qx8v-q2j7-79rf","title":"The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 (2.00...","description":"The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 (2.00(AAKK.3)) devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin.","status":"published","published":"2022-05-24T16:46:57Z","modified":"2024-04-04T00:50:25Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:55:52.724602Z"}],"nvd":[{"id":"CVE-2019-6725","description":"The rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 (2.00(AAKK.3)) devices. After accessing the page, the admin user's password can be obtained by viewing the HTML source code, and the interface of the modem can be accessed as admin.","status":"published","published":"2019-05-31T22:29:01.3Z","modified":"2026-06-17T02:39:33.807Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:05:14.729983Z"}]}}